openmates 0.23.0 → 0.24.0-alpha.1

package/README.md

@@ -349,12 +349,12 @@ intentionally want the chat saved to the OpenMates account.
 
 ## Versioning
 
-OpenMates shows the short product line, for example `v0.23`, in the web app.
+OpenMates shows the short product line, for example `v0.24`, in the web app.
 The npm package uses exact artifact versions:
 
-- `0.23.0-alpha.N` is a prerelease from the `dev` branch published under the
+- `0.24.0-alpha.N` is a prerelease from the `dev` branch published under the
   `alpha` npm tag.
-- `0.23.0` is a stable release from `main` published under the `latest` npm tag.
+- `0.24.0` is a stable release from `main` published under the `latest` npm tag.
 
 Install stable releases with `npm install -g openmates`. Install prereleases with
 `npm install -g openmates@alpha`.

package/dist/{chunk-4ZRD3KG6.js → chunk-ETF6SSYS.js}

@@ -32710,6 +32710,7 @@ var RUNTIME_CHECKS = {
     { id: "http.role_health", required: true, timeoutSeconds: 10 },
     { id: "core.database", required: true, timeoutSeconds: 10 },
     { id: "core.cache", required: true, timeoutSeconds: 10 },
+    { id: "core.cms_cache_consistency", required: true, timeoutSeconds: 10 },
     { id: "core.vault", required: true, timeoutSeconds: 10 },
     { id: "core.worker_queue", required: true, timeoutSeconds: CELERY_PROBE_CHECK_TIMEOUT_SECONDS },
     { id: "core.scheduler_freshness", required: true, timeoutSeconds: CELERY_PROBE_CHECK_TIMEOUT_SECONDS },
@@ -32981,6 +32982,19 @@ function planRestore(input) {
     steps: input.yes === true ? ["stop", "restore", "start", "health-check"] : ["confirm", "stop", "restore", "start", "health-check"]
   };
 }
+function resolveTemplateSource(input) {
+  const role = parseServerRole(input.role);
+  const definition = ROLE_DEFINITIONS[role];
+  if (input.templateUrl) return { type: "url", url: input.templateUrl };
+  if (input.packagedTemplateExists && input.packageVersion && input.imageTag === `v${input.packageVersion}`) {
+    return { type: "packaged", path: definition.templatePath };
+  }
+  return {
+    type: "github-raw",
+    ref: input.templateRef ?? "dev",
+    path: `frontend/packages/openmates-cli/${definition.templatePath}`
+  };
+}
 function parseSecretEnvKey(envKey) {
   if (!envKey.startsWith("SECRET__")) return null;
   const parts = envKey.slice("SECRET__".length).split("__", 2);
@@ -33991,6 +34005,18 @@ async function deliverRuntimeNotification(config, payload) {
   }
   return Promise.all(deliveries);
 }
+var CMS_CACHE_INSPECT_FORMAT = '{{range .Config.Env}}{{if eq . "CACHE_SKIP_ALLOWED=true"}}CACHE_SKIP_ALLOWED=true,{{end}}{{if eq . "CACHE_AUTO_PURGE=true"}}CACHE_AUTO_PURGE=true,{{end}}{{end}}';
+function evaluateCmsCacheConsistency(input) {
+  const result = { id: "core.cms_cache_consistency", required: true, duration_ms: 0 };
+  if (!input.containerFound || !input.inspectionSucceeded) {
+    return { ...result, status: "failed", failureClass: "configuration", sanitized_reason: "cms_cache_inspection_unavailable" };
+  }
+  const flags = new Set(input.filteredEnvironment.split(",").map((value) => value.trim()));
+  if (!flags.has("CACHE_SKIP_ALLOWED=true") || !flags.has("CACHE_AUTO_PURGE=true")) {
+    return { ...result, status: "failed", failureClass: "configuration", sanitized_reason: "cms_cache_flags_missing_or_disabled" };
+  }
+  return { ...result, status: "passed" };
+}
 function applyRuntimeCheckResults(state, results, timestamp) {
   const current = state ?? initialRuntimeIncidentState();
   const checks = { ...current.checks ?? {} };
@@ -34957,25 +34983,30 @@ function fileHash(path2) {
   if (!existsSync13(path2)) return null;
   return createHash18("sha256").update(readFileSync14(path2)).digest("hex");
 }
-async function loadSelfHostComposeTemplate(templateRef, role) {
+async function loadSelfHostComposeTemplate(templateRef, role, imageTag, packageVersion = getPackageVersion()) {
   const templateDir = process.env.OPENMATES_SELFHOST_TEMPLATE_DIR;
   if (templateDir) {
     return readFileSync14(join15(resolve7(templateDir), ROLE_TEMPLATE_FILES[role]), "utf-8");
   }
-  const overrideUrl = process.env.OPENMATES_SELFHOST_COMPOSE_URL;
-  if (overrideUrl) {
-    return fetchText(overrideUrl);
-  }
   const packaged = packagedTemplatePath(role);
-  if (existsSync13(packaged)) return readFileSync14(packaged, "utf-8");
-  return fetchText(`https://raw.githubusercontent.com/glowingkitty/OpenMates/${templateRef}/${ROLE_IMAGE_COMPOSE_FILES[role]}`);
+  const source = resolveTemplateSource({
+    role,
+    packagedTemplateExists: existsSync13(packaged),
+    templateUrl: process.env.OPENMATES_SELFHOST_COMPOSE_URL,
+    templateRef,
+    imageTag,
+    packageVersion
+  });
+  if (source.type === "packaged") return readFileSync14(packaged, "utf-8");
+  if (source.type === "url") return fetchText(source.url);
+  return fetchText(`https://raw.githubusercontent.com/glowingkitty/OpenMates/${source.ref}/${source.path}`);
 }
 async function writeImageModeRuntimeFiles(installPath, imageTag, role) {
   const roleDir = join15(installPath, "backend", role === "core" ? "core" : role);
   const vaultConfigDir = join15(roleDir, "vault", "config");
   mkdirSync13(vaultConfigDir, { recursive: true });
   mkdirSync13(join15(installPath, "config", "providers"), { recursive: true });
-  writeFileSync8(join15(installPath, ROLE_IMAGE_COMPOSE_FILES[role]), await loadSelfHostComposeTemplate(templateRefForImageTag(imageTag, getPackageVersion()), role));
+  writeFileSync8(join15(installPath, ROLE_IMAGE_COMPOSE_FILES[role]), await loadSelfHostComposeTemplate(templateRefForImageTag(imageTag, getPackageVersion()), role, imageTag));
   if (role === "core") {
     writeFileSync8(join15(installPath, OFFICIAL_CLOUD_NO_WEBAPP_COMPOSE_FILE), readOfficialCloudNoWebappComposeTemplate());
   }
@@ -36259,6 +36290,28 @@ async function installContinuousUpdateService(flags) {
   }
   console.log(`Installed ${plan.timerName}.`);
 }
+function inspectCmsCacheConsistency(installPath, withOverrides, installMode) {
+  const composeResult = spawnSync(
+    "docker",
+    [...composeArgs(installPath, withOverrides, installMode, "core"), "ps", "-q", "cms"],
+    { cwd: installPath, encoding: "utf-8", timeout: 5e3 }
+  );
+  const containerIds = composeResult.status === 0 ? composeResult.stdout.trim().split(/\s+/).filter(Boolean) : [];
+  const containerId = containerIds.length === 1 ? containerIds[0] : void 0;
+  if (!containerId) {
+    return evaluateCmsCacheConsistency({ containerFound: false, inspectionSucceeded: false, filteredEnvironment: "" });
+  }
+  const inspectResult = spawnSync(
+    "docker",
+    ["inspect", "--format", CMS_CACHE_INSPECT_FORMAT, containerId],
+    { cwd: installPath, encoding: "utf-8", timeout: 5e3 }
+  );
+  return evaluateCmsCacheConsistency({
+    containerFound: true,
+    inspectionSucceeded: inspectResult.status === 0,
+    filteredEnvironment: inspectResult.status === 0 ? inspectResult.stdout : ""
+  });
+}
 function runRuntimeVerification(installPath, role, config) {
   const envText = existsSync13(join15(installPath, ".env")) ? readFileSync14(join15(installPath, ".env"), "utf-8") : "";
   const mode = resolveRuntimeDeploymentMode({
@@ -36285,6 +36338,11 @@ function runRuntimeVerification(installPath, role, config) {
     throw new Error(`Runtime verifier returned invalid output (${result.status ?? "unknown"}).`);
   }
   output.checks = output.checks.map((check) => ({ ...check, failureClass: check.failureClass ?? check.failure_class }));
+  if (role === "core") {
+    const cmsCacheCheck = inspectCmsCacheConsistency(installPath, withOverrides, installMode);
+    output.checks.push(cmsCacheCheck);
+    if (cmsCacheCheck.status !== "passed") output.status = "failed";
+  }
   if (mode.effectiveMode === "official_cloud") {
     const destinations = runtimeNotificationConfig(installPath);
     const configuredCount = [destinations.email, destinations.discordWebhookUrl, destinations.genericWebhook].filter(Boolean).length;
@@ -76167,7 +76225,7 @@ As of mid-2026, the severe supply shocks from the 2024\u20132025 avian flu have
       text: "Test for free"
     },
     version_title: {
-      text: "v0.23"
+      text: "v0.24"
     },
     domain_not_allowed: {
       text: "E-Mail domain not allowed."

package/dist/cli.js

@@ -19,7 +19,7 @@ import {
   serializeToYaml,
   shouldRequireTrustedAccountGuard,
   waitForWorkflowRun
-} from "./chunk-4ZRD3KG6.js";
+} from "./chunk-ETF6SSYS.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-BBKJZ23O.js";
 export {

package/dist/index.js

@@ -43,7 +43,7 @@ import {
   selectAssistantMessagesForSpeech,
   serializeToYaml,
   summarizeAssistantSpeech
-} from "./chunk-4ZRD3KG6.js";
+} from "./chunk-ETF6SSYS.js";
 import "./chunk-IWKP55ZB.js";
 import "./chunk-BBKJZ23O.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openmates",
-  "version": "0.23.0",
+  "version": "0.24.0-alpha.1",
   "description": "OpenMates CLI and SDK",
   "type": "module",
   "main": "dist/index.js",

package/templates/upload/docker-compose.yml

@@ -21,6 +21,7 @@ services:
       VAULT_AUTO_UNSEAL: "true"
     volumes:
       - vault-setup-data:/app/data
+      - vault-app-data:/app/app-data
     networks: [uploads]
     depends_on: [vault]
     restart: on-failure
@@ -45,7 +46,7 @@ services:
       CLAMAV_HOST: clamav
       CLAMAV_PORT: 3310
     volumes:
-      - vault-setup-data:/vault-data:ro
+      - vault-app-data:/vault-data:ro
     networks: [uploads]
     depends_on: [clamav, vault-setup]
     healthcheck:
@@ -81,3 +82,5 @@ volumes:
     name: openmates-uploads-vault-data
   vault-setup-data:
     name: openmates-uploads-vault-setup-data
+  vault-app-data:
+    name: openmates-uploads-vault-app-data